<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content="MSHTML 6.00.2900.3660" name=GENERATOR></HEAD>
<BODY text=#000000 bgColor=#ffffff>
<DIV dir=ltr align=left><SPAN class=666254023-02052010><FONT face=Arial
color=#0000ff size=2>From the article</FONT></SPAN></DIV>
<DIV> </DIV>
<H3>Nominum CNS</H3>
<P>Nominum's CNS resolver is designed to utilize EDNS only after first receiving
a truncated response. To use this test with a CNS resolver, issue the following
query:</P>
<BLOCKQUOTE><PRE>$ dig tcf.rs.dns-oarc.net txt
</PRE></BLOCKQUOTE>
<P>The special name "tcf" instructs the server to set the TC bit in responses if
the query doesn't have an EDNS pseudo-record. This should cause CNS to re-query
with EDNS.</P>
<DIV> </DIV>
<DIV> </DIV>
<DIV>$ dig tcf.rs.dns-oarc.net txt @resolver1.telstra.net</DIV>
<DIV> </DIV>
<DIV>; <<>> DiG 9.4.2-P2 <<>> tcf.rs.dns-oarc.net txt
@resolver1.telstra.net<BR>;; global options: printcmd<BR>;; Got
answer:<BR>;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id:
62540<BR>;; flags: qr rd ra; QUERY: 1, ANSWER: 5, AUTHORITY: 0, ADDITIONAL:
0</DIV>
<DIV> </DIV>
<DIV>;; QUESTION
SECTION:<BR>;tcf.rs.dns-oarc.net.
IN TXT</DIV>
<DIV> </DIV>
<DIV>;; ANSWER SECTION:<BR>tcf.rs.dns-oarc.net.
60 IN
CNAME tcf.x3831.rs.dns-oarc.net.<BR>tcf.x3831.rs.dns-oarc.net.
59 IN CNAME
tcf.x3837.x3831.rs.dns-oarc.net.<BR>tcf.x3837.x3831.rs.dns-oarc.net. 58 IN
CNAME
tcf.x3843.x3837.x3831.rs.dns-oarc.net.<BR>tcf.x3843.x3837.x3831.rs.dns-oarc.net.
57 IN TXT "203.50.40.33 DNS reply size limit is at least
3843"<BR>tcf.x3843.x3837.x3831.rs.dns-oarc.net. 57 IN TXT "Tested at 2010-05-02
23:42:04 UTC"<BR><BR></DIV>
<DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left>
<HR tabIndex=-1>
<FONT face=Tahoma size=2><B>From:</B> ausnog-bounces@lists.ausnog.net
[mailto:ausnog-bounces@lists.ausnog.net] <B>On Behalf Of </B>Jason
Lingohr<BR><B>Sent:</B> Sunday, 2 May 2010 5:09 PM<BR><B>To:</B>
ausnog@ausnog.net<BR><B>Subject:</B> Re: [AusNOG] Are you DNSSEC
Ready?<BR></FONT><BR></DIV>
<DIV></DIV><FONT size=-1><FONT face="Trebuchet MS">No surprise to see Telstra
resolvers can't handle
EDNS...</FONT></FONT><BR><BR><TT>rst.x476.rs.dns-oarc.net.<BR>rst.x485.x476.rs.dns-oarc.net.<BR>rst.x490.x485.x476.rs.dns-oarc.net.<BR>"203.50.90.32
lacks EDNS, defaults to 512"<BR>"203.50.90.32 DNS reply size limit is at least
490"<BR>"Tested at 2010-05-02 06:55:47 UTC"</TT><BR><BR><BR>On 2/05/2010 2:19
PM, Karl Kloppenborg wrote:
<BLOCKQUOTE cite=mid:516105AF-E34E-460C-9947-96EF46492A15@karltec.net
type="cite">Hey Noggers!
<DIV><BR></DIV>
<DIV>With the DNSSEC roll date set to 5th of may (oh look, that's in three
days!)
<DIV><BR></DIV>
<DIV><B>Are you ready?</B></DIV>
<DIV><BR></DIV></DIV><BR></BLOCKQUOTE></BODY></HTML>